$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/98QB39OciNInxvTfzO2n59SnHUY.roa File: 98QB39OciNInxvTfzO2n59SnHUY.roa (raw, json) Hash identifier: ZMKEwzDPFI4ZV1F0KiEp+p/tR3JheCDlHwwIH6yFQC0= Subject key identifier: F7:C4:01:DF:D3:9C:88:D2:27:C6:F4:DF:CC:ED:A7:E7:D4:A7:1D:46 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3AA9 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/98QB39OciNInxvTfzO2n59SnHUY.roa Signing time: Fri 22 Aug 2025 08:47:36 +0000 ROA not before: Fri 22 Aug 2025 08:47:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 123.195.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15017 (0x3aa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:47:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F7C401DFD39C88D227C6F4DFCCEDA7E7D4A71D46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:dd:eb:56:de:ac:44:6b:73:95:b4:d8:c6: d3:de:5b:33:48:35:e1:5e:51:f5:2d:4f:56:f9:1a: 24:86:86:06:e8:2f:b2:8e:7b:f2:bd:ae:1b:4f:4b: 8c:cd:16:89:33:e0:c6:20:df:93:6b:63:cf:f2:99: 32:5e:81:79:6a:0b:ae:d2:bb:7f:33:24:9a:57:da: 7d:62:7a:e1:b4:bb:d2:4c:7e:de:61:2d:5b:35:36: aa:73:63:45:ba:0a:e9:b0:67:57:6e:07:3e:f1:3e: 4e:82:19:05:ca:49:0b:ce:80:97:83:72:3e:35:6b: 1c:ce:84:2d:58:d8:78:43:08:3d:0c:e7:e6:71:f2: be:42:a8:4d:3a:50:be:5f:e0:95:ad:0c:57:9f:40: 5f:16:3f:51:4b:c7:29:4a:27:c2:57:d0:3c:d7:5e: 88:01:34:92:91:3d:20:c7:65:19:3c:9d:9e:f8:1a: 8a:7d:dc:ed:8b:ea:d9:03:f6:58:d2:6a:05:26:09: e6:4b:99:3d:37:8e:0b:ed:8a:23:12:f9:57:84:db: 0b:eb:f7:cd:e2:cd:5c:85:c0:9a:dc:97:7c:73:46: 2a:4c:f6:73:be:92:4f:1a:00:b3:82:d8:00:17:52: f7:8e:f5:62:8b:53:80:00:3f:81:92:3b:92:db:bd: c6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C4:01:DF:D3:9C:88:D2:27:C6:F4:DF:CC:ED:A7:E7:D4:A7:1D:46 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/98QB39OciNInxvTfzO2n59SnHUY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.148.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:16:b8:e9:cb:67:c8:74:79:74:8a:1e:a7:44:a4:2f:43:4d: ba:8f:ed:bd:70:05:5a:3f:4b:e0:70:c6:36:c1:b3:46:92:99: 21:df:11:af:54:b3:e9:3f:fb:d1:4a:da:75:b6:aa:76:9b:03: 5f:5d:d2:22:53:10:80:4a:75:f2:c7:5d:56:ff:34:41:53:4d: 74:bd:51:18:35:0a:c3:f4:49:90:df:d3:ee:2c:d4:a4:21:28: c9:42:78:9b:b2:2d:d8:21:d4:43:71:95:ff:dd:85:43:23:c6: 7b:1e:dd:66:23:21:91:df:30:19:82:fd:17:37:d7:a6:8d:66: b4:42:76:b8:01:52:96:4d:8a:70:99:67:a3:02:21:40:91:f9: ad:b4:9d:c8:2c:aa:c7:af:5a:21:66:21:55:0d:7c:41:05:0b: cb:28:a3:ef:48:0e:d3:41:34:12:dd:52:69:e8:2a:74:86:49: 32:aa:81:15:7f:9b:b9:c5:d4:52:93:61:c5:5d:a0:7b:78:95: 0b:2d:ea:eb:12:f8:c0:98:04:61:a1:54:ef:d4:9c:fe:91:e6: 52:2a:20:be:60:6e:ad:8e:24:46:5f:6d:14:30:b0:5a:86:ee: 7d:60:2a:98:67:50:06:4b:bd:dc:62:01:d5:2a:56:81:54:f4: 23:7f:d8:70 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICOqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ3MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY3QzQwMURGRDM5Qzg4 RDIyN0M2RjRERkNDRURBN0U3RDRBNzFENDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5Ft3rVt6sRGtzlbTYxtPeWzNINeFeUfUtT1b5GiSGhgboL7KO e/K9rhtPS4zNFokz4MYg35NrY8/ymTJegXlqC67Su38zJJpX2n1ieuG0u9JMft5h LVs1NqpzY0W6CumwZ1duBz7xPk6CGQXKSQvOgJeDcj41axzOhC1Y2HhDCD0M5+Zx 8r5CqE06UL5f4JWtDFefQF8WP1FLxylKJ8JX0DzXXogBNJKRPSDHZRk8nZ74Gop9 3O2L6tkD9ljSagUmCeZLmT03jgvtiiMS+VeE2wvr983izVyFwJrcl3xzRipM9nO+ kk8aALOC2AAXUveO9WKLU4AAP4GSO5LbvcabAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU98QB39OciNInxvTfzO2n59SnHUYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzk4UUIzOU9jaU5Jbnh2VGZ6 TzJuNTlTbkhVWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7 w5QwDQYJKoZIhvcNAQELBQADggEBABoWuOnLZ8h0eXSKHqdEpC9DTbqP7b1wBVo/ S+BwxjbBs0aSmSHfEa9Us+k/+9FK2nW2qnabA19d0iJTEIBKdfLHXVb/NEFTTXS9 URg1CsP0SZDf0+4s1KQhKMlCeJuyLdgh1ENxlf/dhUMjxnse3WYjIZHfMBmC/Rc3 16aNZrRCdrgBUpZNinCZZ6MCIUCR+a20ncgsqsevWiFmIVUNfEEFC8soo+9IDtNB NBLdUmnoKnSGSTKqgRV/m7nF1FKTYcVdoHt4lQst6usS+MCYBGGhVO/UnP6R5lIq IL5gbq2OJEZfbRQwsFqG7n1gKphnUAZLvdxiAdUqVoFU9CN/2HA= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:37 2025 by rpki-client